An Intelligent ICMPv6 DDoS Flooding-Attack Detection Framework (v6IIDS) using Back-Propagation Neural Network. Issue 3 (3rd May 2016)

• Record Type: Journal Article
• Authors: Saad, Redhwan M. A.; Anbar, Mohammed; Manickam, Selvakumar; Alomari, Esraa
• Is Part Of: IETE technical review. Volume 33:Issue 3(2016)
• Page Start: 244
• Page End: 255
• Publication Date: 2016-05-03
• Subjects: back-propagation algorithm -- intrusion detection system -- ICMPv6 DoS/DDoS flooding attack -- IPv6 security -- Network security; Telecommunication -- Periodicals; Electronics -- Periodicals; Electronics; Telecommunication; Periodicals; 621.38
• DOI: 10.1080/02564602.2015.1098576
• Languages: English
• ISSNs: 0256-4602

Abstract

ABSTRACT: IPv6 was designed to solve the issue of adopting IPv4 addresses by presenting a large number of address spaces. Currently, many networking devices consider IPv6 as a supportive IPv6-enabled device that includes routers, notebooks, personal computers, and mobile phones. Security has increasingly become a significant issue in exploiting networks and obtaining the benefits of IPv6. One of the important protocols in IPv6 implementation that is used for neighbor and router discovery is ICMPv6. However, this protocol can be used by attackers to deny network services through ICMPv6 DDoS flooding attacks that decrease the network performance. To solve this problem, this study proposes an intelligent ICMPv6 DDoS flooding-attack detection framework using back-propagation neural network (v6IIDS) in IPv6 networks. This study also explores and analyzes the detection accuracy of the proposed v6IIDS framework. The effectiveness of the v6IIDS framework is demonstrated by using real data-sets obtained from an NAv6 laboratory. The data-set traffic is based on a test-bed environment created on the basis of certain parameters used as inputs to generate a new data-set. The results prove that the proposed framework is capable of detecting ICMPv6 DDoS flood attacks with a detection accuracy rate of 98.3%.